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(54) System and process for remote payments and transactions in real time by mobile telephone 



(57) A system and a process for processing pay- 
ments and transactions between payers (1 3) and pay- 
ees (27, 29, 14, 14a, 1 3a, 46) associated to the system, 
using a first server (20) interconnected with telecommu- 
nication means (18, 19, 28, 47) with 

first data storage means (22) containing informa- 
tion on each associated payer (13) consisting of at least 
an admissible telephone number, at least a authoriza- 
tion criterion for authorizing a transaction, and a safety 
criterion associated to the admissible telephone 
number, as well as an admissible identification code of 
each payee; 

- second data storage means (21 ) that contain a sec- 
ond information referring to the type of digital mobile 
telephone (16, 41) belonging to each telephone 
number; 

- selecting means (20h) for verifying one of the tele- 
communication equipments (18, 1 9) that communi- 
cates with the digital mobile telephone (1 6, 41 ) iden- 
tified by the admissible telephone number by 
means of a telecommunication service being com- 
patible with the type of digital mobile telephone (1 6, 



41 ) as identified. 
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Description 

TECHNICAL FIELD OF THE INVENTION 

[0001] The present invention is applicable to the in- 
dustrial field of electronic transactions related to busi- 
nesses and means of payment and in the field of mobile 
telephones. 

BACKGROUND OF THE INVENTION 

[0002] In prior art there is known the use of payment 
processes and systems by means of a mobile telephone 
which are based on the use of a point of sale terminal, 
to which a mobile telephone is added in order to carry 
out the transactions. 

[0003] In this sense, European patent application EP- 
A-0940783 or U.S. Patent US-A-5754655 can be cited. 
[0004] Furthermore, systems are known in which a 
mobile telephone does not form part only of a point of 
sale terminal, but also payment is made by means of a 
mobile telephone, for which purpose the mobile tele- 
phone has to be modified so that safe transactions can 
be carried out. In this sense we can cite European patent 
application EP-A-0785534. 

[0005] Other systems are based on transmitting the 
number of the payer's bank account to a payment col- 
lector by means of a connection from the collector's mo- 
bile telephone to a bank, such as the case of patent ap- 
plication WO-A-96/13814 or patent application WO-A- 
97/45814. 

[0006] These systems have the inconvenience that 
the user must inform a person that he might not know, 
on his bank account number, which represents a very 
high risk. 

[0007] French patent application FR-A-2779896 
which describes a process wherein payment is carried 
out by means of the identification of the buyer should 
also be pointed out which process consists of ensuring 
that said buyer is a subscriber normally subscribed to a 
list of subscribers of the communication network. 
[0008] This process has the inconvenience that the 
confirmation of the transaction is first made from the 
payment server to the businesses server and then from 
the store's server to the buyer, whereby the payment 
server cannot certify that the confirmation of the trans- 
action has been transmitted to the buyer. Furthermore 
after the buyer decides to make a purchase, communi- 
cations can only be held between the server of the 
means of payment and the store's server, which implies 
that the buyer and the seller are customers of the server 
of the means of payment so that this latter server can 
compensate his account. 

[0009] Another document is European patent applica- 
tion EP-A-0986275 that refers to a method to carry out 
a transaction between a buyer, who has a mobile tele- 
phone, and a seller, both being subscribed to a valida- 
tion platform. In order to carry out the transaction, a con- 



tact is established between the buyer and the seller, and 
a purchase agreement is reached; then, the buyertrans- 
mits a confirmation message that includes the buyer's 
identification. A copy of the purchase confirmation is 

5 transmitted, automatically, to the validation platform, 
from the buyer or from the seller. 
[0010] Mention can also be made of PCT application 
WO-A-98/54678 which refers to a system in order to ac- 
tivate a petrol pump by means of a mobile telephone. In 

w order to fill up the tank, the buyer makes a telephone 
call from his mobile telephone to a unit, and introduces 
a first secret code. The unit verifies the buyer's tele- 
phone number and the first secret code, it verifies that 
the code corresponds to the telephone number and it 

is verifies whether the buyer thus verified is on a "black 
list". If the verified buyer is not on the "black list", he is 
granted access to the system and the buyer can enter 
the code identifying a specific petrol pump in question 
and can fill up the tank. 

20 [0011] European patent application EP-A-0950968 
describes an electronic trading system that includes a 
mobile terminal which can be provided with means for 
carrying out a wide range of operations (payment card, 
telephone card, electronic ticket for shows, etc.) 

25 [001 2] PCT application WO-A-98/471 1 6 that refers to 
a payment system using a mobile telephone can also 
be cited. In this case the payer transmits information that 
identifies him/her, and information regarding the amount 
of the transaction and an identifier of the seller, to the 

30 transaction center. 

[001 3] The abstract of the publication of Japanese ap- 
plication JP-A-08/249530 that describes a way of oper- 
ating a vending machine by means of a mobile tele- 
phone can also be cited. 

35 [0014] French patent application FR-A-2780800 re- 
fers to a mobile telephone payment system that includes 
the transmission of data that identify a seller from a pay- 
er's mobile telephone. 

[0015] German patent application D E- A- 1 9806557 
40 describes a system for indicating expenses. 

[0016] PCT application WO-A-98/06214 refers to a 
system for alerting the holder of a credit card, payment 
card, mobile telephone or the like, about fraudulent use 
thereof. For example, when an attempt is made to carry 
45 out a transaction using a credit card in a terminal of a 
point of sale, the system detects that an attempt to use 
the credit card is being made and a warning is sent to a 
telecommunications device, such as a mobile tele- 
phone, of the holder of the card, so that the holder there- 
to of can authorize or refuse the transaction, or simply so 
that the holder thereof may be informed about the trans- 
actions carried out. 

[001 7] None of the cited documents permits selection 
of a specifically suitable communication equipment, by 
55 selecting the suitable communication channel depend- 
ing on the user's type of mobile telephone, in such a way 
that payment can be made by a plurality of types of mo- 
bile telephones, without changing the structure or parts 
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thereof. 

[0018] On the other hand, none of the cited docu- 
ments consider the possibility of carrying out the certifi- 
cation of the purchase of Intellectual Property, nor the 
inclusion of an electronic delivery note, nor the purchase 
from vending machines. 

OBJECT OF THE INVENTION 

[0019] The invention in question has the purpose of 
solving the inconveniences of prior art by means of a 
system and a process, which allows the use of any mo- 
bile telephone as a means of payment: purchases in 
person, i.e. when the user goes directly to the store; pur- 
chases by Internet of goods as well as of Intellectual 
Property, for example information, music or video 
games; purchases from vending machines; purchases 
and reservations in advance; purchases by catalogue; 
purchases in response to any type of commercials or 
advertisements, such as for example, television com- 
mercials or written advertisements; pay per view; and to 
allow transactions between users, and all of this irre- 
spective of the type of mobile telephone that the users 
have. Due to the design of the system, it is applicable 
for any other type of purchase. Transactions are carried 
out in real time. 

[0020] The invention permits payment to be made 
from any type of digital mobile telephone, hereinafter re- 
ferred to as "mobile telephone", without the mobile tel- 
ephone having to be modified which permits any user 
who has a mobile telephone to hire the group of payment 
functions and services; and ail of this without the use of 
credit cards, and without the need of the user having to 
be necessarily a client of a bank. For this purpose a 
transaction and payment center is provided for and this 
center is provided with the different mobile communica- 
tion capacities with the corresponding equipment and 
means for identifying from what type of mobile tele- 
phone payment is being requested or made, and thus 
allow the transaction and payment center to make the 
communication with any mobile telephone by means of 
the corresponding mobile telephone equipment. 
[0021] It should be emphasized that the invention also 
permits a purchase receipt to be obtained, even in the 
case of the purchase of Intellectual Property by Internet. 
Furthermore, confirmation of delivery of previously pur- 
chased goods, certifying the delivery without the need 
of the seller to hand over a delivery note is achieved by 
means of the invention. 

[0022] The invention may be implemented in all coun- 
tries having a mobile telephony network, and especially 
in those countries where a nationwide management 
company has been established. This company will 
agree with the country's mobile telephone operators on 
the conditions of providing and operating the service, 
and payment will be carried out by means of any type 
of mobile telephone without the need of making varia- 
tions thereof. 



DESCRIPTION OF THE INVENTION 

[0023] To achieve the aforementioned objects, the in- 
vention provides a system for processing payments and 
5 transactions between payers and payees being associ- 
ated to the system, using at least one communication 
by digital mobile telephony, the system comprising: 

a first server interconnected with telecommunica- 
te tion means with first data storage means and includ- 
ing account management means that process first 
data of an account of each associated payer and 
second data of an account of each associated pay- 
ee; wherein 

the first telecommunication means selectively com- 
municate the first server with a digital mobile tele- 
phone unit identified by an admissible telephone 
number of an associated payer and with a telecom- 
munication terminal identified by an admissible 
identification code of an associated payee; the tel- 
ecommunication means comprising a plurality of 
telecommunication equipments; 
the first data storage means contain first information 
on each associated payer, said first information 
comprising at least the admissible telephone 
number, at least a pre-established authorization cri- 
terion for authorizing at least one transaction that 
requires a payment from the associated payer's ac- 
count and at least a safety criterion associated uni- 
vocally to the associated payer's telephone number, 
as well as some second information on each asso- 
ciated payee that comprises at least the admissible 
identification code; the first server comprising 
first verifying means for verifying in the data storage 
means whether a first message received through 
the telecommunication means contains an admis- 
sible telephone number of an associated payer and 
an admissible identification code of an associated 
payee, said first verifying means generating a first 
acceptance message when they detect an admis- 
sible identification code and an admissible tele- 
phone number; 

second verifying means for verifying in the data 
storage means whether a transaction authorization 
request received through the telecommunication 
means in addition to the admissible telephone 
number detected by the first verifying means, satis- 
fies said pre-established authorization criterion, 
said second verifying means generating a second 
acceptance message when the authorization re- 
quest satisfies said authorization criterion; 
third verifying means for verifying in the first data 
storage means whether a safety parameter re- 
ceived through the telecommunication means sat- 
isfies the safety criterion associated to the admissi- 
ble telephone number detected by the first verifying 
means, said third verifying means generating a third 
acceptance message when they detect that the 
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safety parameter satisfies the safety criterion asso- 
ciated to the admissible telephone number; 
authorization means for authorizing the account 
management means on the basis of the authoriza- 
tion request, to process a debit in the associated 
payer's account and to process a corresponding 
credit in the associated payee's account as long as 
the first, second and third acceptance messages 
have been generated; 

rejection message generating means for generat- 
ing a rejection message when at least one of the 
acceptance messages has not been generated, 
and for transmitting the rejection message to the tel- 
ecommunication means; 

confirmation message generating means for gener- 
ating at least a confirmation message when at least 
one of the acceptance messages has been gener- 
ated, and for transmitting said confirmation mes- 
sage to the telecommunication means, and for se- 
lective transmission of the confirmation message to 
the mobile telephone identified by the admissible 
telephone number in said first message, and to the 
telecommunication terminal identified by the admis- 
sible identification code; 

second data storage means that contain at least 
first information referring to the admissible tele- 
phone number of each payer, and at least second 
information referring to the type of digital mobile tel- 
ephone belonging to each telephone number; 
selecting means for verifying in said second data 
storage means, the second information corre- 
sponding to the digital mobile telephone unit iden- 
tified by the admissible telephone number and for 
selecting one of the telecommunication equipments 
that communicates with a digital mobile telephone 
identified by the admissible telephone number by 
means of a telecommunication service being com- 
patible with the type of digital mobile telephone 
identified in said second information. 

[0024] In an embodiment of the invention, each sec- 
ond information contained in the second data storage 
means and referring to the type of digital mobile tele- 
phone corresponding to each admissible telephone 
number of each associated payer and each admissible 
identification code of each payee when the latter is a 
number of a digital mobile telephone, is a first identifying 
code being representative of the International Mobile 
Equipment Identifier (IMEI). 

[0025] The incorporation of the IMEI codes on the ba- 
sis of which, according to this embodiment, the types of 
mobile telephones corresponding to each of the admis- 
sible telephone numbers are identified, may be made 
by loading data from a source being alien to the system 
or, alternatively or complementarily, by inquiry and up- 
dating means being present in the system. This, the first 
server may comprise first inquiry means for inquiring in 
at least one Visitor Location Register (VLR) comprising 



a first register relating telephone numbers with an IMEI 
code, the IMEI code corresponding to each of the ad- 
missible telephone numbers, and updating means for 
updating said second information in the second data 

5 storage means by comparing each IMEI code inquired 
by the first inquiry means with each code being repre- 
sentative of the IMEI code associated to each admissi- 
ble telephone number as contained in the second data 
storage means. 

10 [0026] Alternatively or complementarily, the first in- 
quiry means may also extract the IM El codes associated 
to each admissible telephone number, 

* from an Equipment Identifier Register (EIR) that 
'5 contains an association between each admissible 

telephone number and the IMEI code correspond- 
ing to each admissible telephone number, and 
which receive said association from each Visitor Lo- 
cation Register as updated by said Visitor Location 
20 Register; 

* from an Unstructured Supplementary Service Data 
(USSD) frame into which each Visitor Location Reg- 
ister associated to each Mobile Switching Center 
(MSC) which has issued said frame, has inserted 

25 the IMEI code associated to the admissible tele- 
phone number corresponding to the user who has 
originated said frame; 

* through an interface between the Visitor Location 
Register and said inquiry means; and/or 

30 * by third inquiry means for inquiring in a data bank 
of a mobile telephony network operator, registers 
that each Mobile Switching Center (MSC) transfers 
immediately each time a USSD frame or a voice call 
is addressed to a specific telephone number, said 

35 registers containing a relation of each telephone 
number from which a call was made or originated 
the USSD frame with an IMEI code of the terminal 
from which said call or frame originated, in respect 
of the IMEI codes corresponding to each admissible 

40 telephone number, and by third updating means for 
updating said second information in said second 
data storage means on the basis of a comparison 
of each inquired IMEI code inquired by the third in- 
quiry means with each code being representative 

45 of the I M E I code associated to each admissible tel- 
ephone number contained in the second data stor- 
age means. 

[0027] Also alternatively or complementarily, the first 
so server may comprise second inquiry means for inquiring 
the IMEI code corresponding to each admissible tele- 
phone number, in Call Data Registers (CDR) of a data 
bank of a mobile telephony network operator, that con- 
tain a relation of each telephone number which, on the 
55 grounds of a call, has originated a Call Data Register 
with an IMEI code of the terminal from which said call 
originated, and by second updating means for updating 
said second information in the second data storage 
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means on he basis of a comparison of each IMEI code 
inquired by the second inquiry means with each code 
being representative of the IMEI code associated to 
each admissible telephone number, contained in the 
second data storage means. 5 
[0028] On the other hand, the information on the type 
of mobile telephone corresponding to each admissible 
telephone number stored in the second data storage 
means, may also be complemented with other data, as 
for example, at least one datum being indicative of a 10 
communication capacity selected from a capacity of 
managing sessions according to Wireless Application 
Protocols (WAP), a capacity of managing sessions of 
U nstructured Supplementary Service Data (USSD), and 
combinations thereof, of each digital mobile telephone 15 
identified by an IMEi code and associated to an admis- 
sible telephone number. 

[0029] The presence of the second data storage 
means has the advantage that the system, on the basis 
of comprising information o the types of mobile tele- 20 
phones of the associated payers and, in some cases, of 
associated payees, is capable of selecting the commu- 
nication channel being the most efficient and quick one 
for communicating with a payer, this being especially im- 
portant when the first message, i.e. the first communi- 25 
cation regarding a transaction, has not been established 
from the mobile telephone of an associated payer, be- 
cause thus a fast and efficient communication may be 
established without the mobile telephones of the users 
needing to be modified. 30 
[0030] The admissible identification code of each pay- 
ee may be selected among a telephone number, a 
number related to a telephone number, an Internet code, 
a code representative of an Internet code, an e-maii ad- 
dress, and a code based on an e-mail address. The ad- 35 
missible identification code of a payee may also be that 
of a digital mobile telephone the admissible telephone 
number and type of which are comprised in the second 
data storage means. In this latter case, the first server 
further comprises complementary verifying means be- 40 
ing associated to the selecting means, for verifying if the 
admissible identification code that has been verified by 
the first verifying means in said first message received 
from a payer identified by a first admissible telephone 
number and containing a transaction request that has 45 
been verified by the second verifying means, corre- 
sponds to a second admissible telephone number from 
among the admissible telephone numbers of a digital 
mobile telephone comprised within the first information 
contained in the first data storage means. Thus, when 50 
said verifying means detect that the first message iden- 
tifies the second admissible telephone number as iden- 
tification of a payee, the complementary verifying 
means generate a fourth acceptance message being 
processable by the confirmation message generating 55 
means. On the other hand, the rejection message gen- 
erating means generate a rejection message when the 
fourth message has not been generated. 



[0031] Also, the admissible telephone numbers of 
each or of at least a part of the payers, may be contained 
in the first and/or second data storage means as such 
and/or in the form of a code being representative of said 
numbers, such as for example as MSISDN associated 
to an admissible telephone number, such the first veri- 
fying means verify the payer's admissible telephone 
number from said code representative of said admissi- 
ble telephone number and contained in the first data 
storage means, as received through the telecommuni- 
cation means. In accordance with the invention, the sec- 
ond acceptance message may be designed such that 
emission thereof generates an order to the telecommu- 
nication means, to transmit to the mobile telephone of 
a payer identified by the admissible telephone number, 
a first confirmation message that contains a request to 
transmit the safety parameter that is to be verified by the 
third verifying means against the safety criterion. This 
embodiment is applicable when the first message does 
not contain a safety parameter which is always the case 
when the first communication regarding a transaction 
has been established by a payee, and in those cases 
where a payer, in his/her first communication, has not 
yet transmitted a safety parameter. Thus, when the first 
message verified by the first verifying means is a mes- 
sage received from the telecommunication terminal of 
a payee, the second acceptance message generates an 
orderto the telecommunication means to establish com- 
munication with the mobile telephone for requesting the 
payer identified by the admissible telephone number to 
transmit the safety parameter. On the other hand, when 
the first message verified by the first verifying means is 
a message received without a safety parameter from the 
mobile telephone of a payer, the second acceptance 
message generates an order to the telecommunication 
means, to transmit a message to said mobile telephone 
requesting the payer identified by the admissible tele- , 
phone number to transmit the safety parameter. 
The second message may be also designed to further 
generate an order to the telecommunication means to 
communicate with the telecommunication terminal iden- 
tified by the admissible identification code detected by 
the first verifying means, to transmit a second confirma- 
tion message that confirms the generation of the first 
acceptance message. 

On the other hand, the third acceptance message gen- 
erates an order to the telecommunication means to 
communicate with the telecommunication terminal iden- 
tified by the admissible identification code detected by 
the first verifying means to transmit a third confirmation 
message that confirms the generation of the third ac- 
ceptance message. 

[0032] The third acceptance message generated by 
the third verifying means may be further designed to 
generate an order to the telecommunication means, to 
communicate with the mobile telephone identified by the 
admissible telephone number detected by the first ver- 
ifying means, and to transmit a fourth confirmation mes- 
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sage that confirms the generation of the third accept- 
ance message, such that the payer receives a confir- 
mation that the transaction has been authorized. 
[0033] In an advantageous embodiment of the inven- 
tion, the third acceptance message generated by the 5 
third verifying means generates a command to the ac- 
count management means to process the debit in the 
payer's account and to process the corresponding credit 
in the payee's account. 

[0034] At their end, the account management means 
control at least a first intermediate account of each pay- 
ee contained in the first data storage means and in 
which each credit is made, and, in an advantageous em- 
bodiment of the invention, the account management 
means comprise first transmission means for transmit- 
ting said credit to an administration and management 
server that comprises a payees' data bank in which all 
credits made in favor of each payee are stored, the ad- 
ministration and management server transferring the 
credits contained in the data bank to financial entities 
that manage each payee's financial accounts. 
On the other hand, the account management means ad- 
vantageously may also be designed to control second 
intermediate accounts selected from prepayment ac- 
counts, such as accounts based on an electronic purse 
previously created in the first data storage means for 
each payer who has previously "loaded" this purse by 
means of a payment in an analogous manner to how 
conventionally electronic purses are loaded, for exam- 
pie, in payment cards or telephone cards, realtime debit 
accounts having a performance being analogous to that 
of debits charged by banks on the grounds of payments 
made with debit cards, and post-payment accounts be- 
ing analogous to bank accounts which are charged with 
payments made with credit cards. Each intermediate ac- 
count of each payer is associated to a pre-established 
authorization criterion which is verified by the second 
authorization means. The authorization criterion may 
be, for example, an available balance in an intermediate 
account, a maximum credit limit and combinations 
thereof. 

[0035] On the other hand, in an advantageous em- 
bodiment of the invention, the account management 
means comprise second transmission means for trans- 
mitting said debit to an administration and management 
server that comprises a payers' data bank wherein all 
debits made against each payer are stored, the admin- 
istration and management server transferring the cred- 
its contained in the payers' data bank to financial entities 
that manage each payer's financial accounts., so as to 
make all required final transactions from the account of 
each payer to the account of each payee. 
[0036] The safety criterion associated to each admis- 
sible telephone number and known to the payer identi- 
fied by the admissible telephone number, may be a se- 
cret identification code, such as an alphanumeric code 
as for example a PIN code, stored in the first data stor- 
age means. In this case, the third identification means 



are designed to verify, in a manner known perse, if a 
safety parameter received from a digital mobile tele- 
phone of a payer involved in an transaction, corre- 
sponds to said code, by means of one of the following 
verification methods which are applied according to the 
kind of safety criterion associated to said admissible tel- 
ephone number: 

* Direct verification of whether the safety parameter 
contains the secret identification code; 

* Verification of whether the safety parameter con- 
tains an encrypted result of a self-verification car- 
ried out locally in the mobile telephone after direct 
entry of the secret identification code into the mobile 
telephone by the payer, by means of decryption 
means for decrypting the encrypted result, on the 
basis of the secret identification code stored in the 
first data storage means. 

[0037] In addition to the criteria ad information already 
described herein before, the first data storage means 
may further contain, at least in respect of certain payees, 
complementary information i.e. fourth information asso- 
ciated to said second information and which comprise 
reference code identifying products or services of a pay- 
ee as well as a price associated to each product or serv- 
ice. This fourth information is useful in the applications 
of the system of the invention which will be described 
hereafter. 

[0038] On the one hand the fourth information may be 
used to calculate the value of a requested transaction 
and for transmitting to the associated payers information 
and the products and/or services and/or total prices and/ 
or partial prices of transactions the authorization of 
which is being or could be or is to be processed, and to 
thereby request the payer's conformity. Thus, in an em- 
bodiment of the invention, the second acceptance mes- 
sage further generates an order to the telecommunica- 
tion means to transmit at least the value of the transac- 
tion, or the total value and a specification of products 
and/or services, corresponding to the transaction, to- 
gether with an identification of the payee, which are 
transmitted together with the message requesting the 
safety criterion, to the mobile telephone of the payer 
identified by the admissible telephone number involved 
in the transaction. 

[0039] On the other hand, the fourth information may 
furthermore comprise a first selectable telephone 
number, comprised of one of the aforementioned refer- 
ence codes and an identification code of the corre- 
sponding payee, which selectable phone number con- 
stitutes the admissible identification, such that purchase 
of a product or service is enabled by means of the ad- 
missible identification codes, such as for example tele- 
phone numbers which each univocally identify each 
product or service, or each group of products or services 
of a certain payee. 

[0040] On the other hand, the fourth information may 
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further comprise the admissible identification code in the 
form of an access telephone number to the payee which 
access telephone number is associated to at least a first 
menu comprised of the reference codes, the products 
or services, identified respectively by each one of said 
reference codes and the price of said products or serv- 
ices. 

[0041] In another embodiment of the invention, the 
first data storage means may group payees who, for ex- 
ample, offer similar products or services, under one 
same admissible identification code, particularly an ad- 
missible access telephone number which, when dialed, 
provides access to a menu of options wherein the pay- 
ees grouped under the admissible access telephone 
number are specified, from which menu the payer may 
elect at least one payee being in turn identified by an 
admissible telephone. The menu may be designed in 
such a manner that, starting from the same, the payer 
may directly access the elected payee to know the pay- 
ee's products and/or services, making his/her selection 
in the menu, or in such a way that election of a certain 
payee provides access to the payer, to fifth information 
associated to said second information and analogous to 
fourth information. This fifth information advantageously 
comprises reference codes that identify products or 
services of each one of the payee as well as a price as- 
sociated to each product or service. 
[0042] The system of the present invention is suitable 
to be used in and adapted to, a plurality of different trans- 
actions, such as purchases in person where the payer 
is staying in the premises, as for example a store, of a 
payee, purchase of software files by Internet, purchase 
of products or services with advance payment, delivery 
of products or services with a delivery receipt, and pay- 
ment from one person to another. 
[0043] Thus, in an embodiment applicable to when a 
payer wishes to acquire software files such as computer 
programs, computer games, music, videos etc., the sys- 
tem is designed in such a way that it may process a first 
message which, in addition to the payer's admissible tel- 
ephone number, the payees admissible identification 
code of the payee who, in this case, is a software pro- 
vider, contains a recipient e-mail address to which the 
payer wishes the software file to be transmitted by the 
payee. In this case, the system, in addition to performing 
the steps which have already been described herein be- 
fore, operates with confirmation message generating 
means which additionally generate a further confirma- 
tion message that contains a decryption code of the soft- 
ware file, received from the payee in the first server, said 
further confirmation message being transmitted to the 
payer's mobile telephone so that the payer may decrypt 
the software file received at said recipient e-mail ad- 
dress. 

[0044] On the other hand, when the system is used 
for making a purchase with advance payment, the sys- 
tem may be designed in such a way that the first server 
additionally comprises first detecting means for detect- 



ing a first instruction to make a purchase with advance 
payment and collection code generating means. In this 
embodiment, the confirmation message generating 
means further generate a complementary confirmation 
s message that contains the collection code, said comple- 
mentary confirmation message being transmitted to the 
payer's mobile telephone and to the payee's telecom- 
munication terminal. Thereby, the payer or a person in 
which the payer has delegated, may receive the ac- 
quired product or service from the payee, by indicating 
to the payer the collection code. 
[0045] In an embodiment of the system being appli- 
cable to transactions where issuance of a delivery re- 
ceipt is required, the first data storage means further 
comprise, with respect to each payee, third information 
associated with said second information and that com- 
prises data regarding products or services correspond- 
ing to each authorized transaction, and the first server 
further comprises second detecting means for detecting 
a second instruction to manage a delivery in person cor- 
responding to an authorized transaction and received 
from the telecommunication terminal being a payee's 
mobile telephone, delivery code generating means for 
generating a delivery code identifying at least a product 
or service to be delivered, and identification message 
generating means identifying said product or service. In 
this embodiment, the confirmation message generating 
means further generate an additional message that con- 
tains the delivery code, said additional message being 
transmitted to the payer's mobile telephone and to the 
payee's mobile telephone and the identifying message 
being transmitted at least to the payer's mobile tele- 
phone along with a request to transmit the safety pa- 
rameter. For managing the delivery, the system com- 
prises delivery management processing means that, 
when the third verifying means have verified that the 
safety parameter satisfies the safety criterion associat- 
ed to the payer's mobile telephone, generate an entry 
in a delivery note data, which, preferably, is inquirable 
by the payees for which such delivery notes have been 
generated. 

In an embodiment of the invention applicable to trans- 
actions relating to purchases of associated payers in 
vending machines, the second information in the first 
data storage means comprises identification codes of a 
plurality of vending machines each one of which in- 
cludes a digital mobile telephone as a telecommunica- 
tion terminal, identified by a mobile telephone number 
as an admissible identification code, an authorization 
code associated to the admissible identification code of 
each vending machine and an activation code for acti- 
vating the vending machine, associated to each author- 
ization code that activates the vending machine for re- 
ceiving a request from the payer identified by the admis- 
sible telephone number. In this embodiment, the confir- 
mation message generating means generate, when the 
first, second and third verifying means have respectively 
generated the first, second and third acceptance mes- 
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sage, and transmit the confirmation message that com- 
prises at least the code for activating the vending ma- 
chine and the admissible telephone number of the pay- 
er's mobile telephone. So that the payer may select and 
extract a product which he/she wishes to acquire at the 
vending machine, this embodiment may. depending on 
the pre-established conditions stored in the first data 
storage means, adopt one or both of the following con- 
figurations: 

[0046] In accordance with the first of these configura- 
tions, the confirmation message generating means es- 
tablish a communication between the payer's mobile tel- 
ephone and the vending machine, for a pre-established 
period of time during which the payer can transmit, 
through the first server, a selection message to the 
vending machine. In this configuration, the server fur- 
ther comprises deactivation detecting means for detect- 
ing deactivation of the vending machine. 
[0047] In accordance with the second configuration, 
the confirmation message generating means in the first 
server, close the communication with the vending ma- 
chine after having transmitted the confirmation mes- 
sage, so that the payer may make his selection directly 
by means of the selection display or a keyboard of the 
vending machine. 

[0048] In view that in the great majority of the cases 
the products dispensed by vending machines have only 
low prices, in this embodimentthe authorization criterion 
associated to the admissible telephone number of each 
vending machine is a direct authorization code that es- 
tablishes a maximum limit selected from an economic 
value and a number of dispensing requests, admitted in 
a specific period of time in respect of requests made 
from the same mobile telephone, such that the confir- 
mation message generating means generate the confir- 
mation message when the direct authorization code has 
been detected. Thereby, the need of the second verifi- 
cation means having to access the first data storage 
means for verifying the authorization criterion being spe- 
cifically assigned to the payer is avoided and, thus, a 
greater speed and a lower cost of the transaction is 
achieved. 

[0049] In this embodiment, the first server preferably 
further comprises recording means associated to the 
authorization means, for recording transactions record- 
ed in each vending machine. 

The system of the invention may be also adapted for 
enabling payment transactions from one associated us- 
er to another, for which purpose the system may be de- 
signed in such a manner that the confirmation message 
generating means generate, when detecting the first, 
second, third and fourth acceptance message, a first 
confirmation message containing an identification of the 
payer, an identification of the transaction and a petition 
for conformity to the payee identified in the first mes- 
sage. Said petition for conformity further comprises a 
request of transmission of the safety parameter which 
said confirmation message transmit to the mobile tele- 



phone of the payee identified by the second admissible 
telephone number through the telecommunication 
means selected by said selecting means. In turn, the 
third verifying means furthermore verify if the safety pa- 

5 rameter transmitted from the mobile telephone in re- 
sponse to the petition for conformity, satisfies the safety 
criterion associated to the second admissible telephone 
number, and generate a fifth acceptance message when 
said parameter satisfies said safety criterion, whilst the 

10 authorization means authorize the account manage- 
ment means when said fifth acceptance message has 
been generated, whereafter the confirmation message 
generating means generate and transmit a second con- 
firmation message to the mobile telephone of the payer 

15 and to the mobile telephone of the payee. 

[0050] Preferably, at least the first server with the be- 
fore describe means, is integral with a transaction and 
payment center. 

[0051] On the other hand, the present invention also 
20 relates to a process for processing payments and trans- 
actions between payers and payees associated to the 
hereinabove described system, by using at least one 
mobile telephony communication, which process partic- 
ularly comprises the steps of 

25 

selectively receiving, through telecommunication 
means, in a payment and transaction center, a first 
message a first message comprising the number of 
a mobile telephone of a payer or an identification 
30 code of a payee, and, furthermore, 

receiving the amount of a purchase or of a code 
identifying a product or service, in the payment ad 
transaction center, 

verifying if the first message originates from a payer 
35 identified by an admissible telephone number or an 
admissible identification code of a payee; 
- verifying if conditions of a transaction requested in 
the first message, satisfy transaction criteria stored 
in first data storing means; 
40 - verifying the type of digital mobile telephone asso- 
ciated to the admissible telephone number, in sec- 
ond data storage means, and selecting one tele- 
communications equipment for communicating with 
the digital mobile telephone identified by the admis- 
45 sible telephone number, through a telecommunica- 
tions service being compatible with the type of dig- 
ital mobile telephone identified by the admissible 
telephone number; 

checking "on line", in the first data storage means, 
so jf the payer has a disposable balance in a previously 
created electronic purse in said transaction and 
payment center; 

requesting the payer identified in the first message, 
when the transaction condition is satisfied and there 
55 is a sufficient disposable balance for authorizing the 
transaction, to introduce into the mobile telephone 
identified in the first message, and to transmit, a 
safety parameter; 
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verifying in the first data storage means, if the safety 
parameter introduced into and transmitted by, the 
mobile telephone of the payer, satisfies a safety cri- 
terion univocally assigned to said mobile telephone; 
authorizing and carrying out the transaction as re- 
quested when the safety parameter satisfies the 
safety criterion; and 

sending a confirmation that the transaction has 
been carried out, to the mobile telephone of the pay- 
er and to the payee. 

[0052] All these steps are common for the different 
embodiments of the invention and in the event that the 
buyer makes a purchase in person, in other words, di- 
rectly at the seller's store, the seller is the one who starts 
the transaction, and the identification of the buyer is 
done_by means of the seller transmitting the buyer's 
mobile telephone number to the transaction and pay- 
ment center. 

[0053] In this case the identification of the seller is 
done implicitly by means of the communication that is 
established with the transaction and payment center in 
order to transmit the buyer's mobile telephone number 
along with the amount of the purchase or identification 
code of the product that is being purchased. This com- 
munication is carried out by means of a connection be- 
tween a seller's mobile telephone and the transaction 
and payment center. 

[0054] Therefore, the process of the invention com- 
prises a step in which the buyer provides his telephone 
number to the seller. This step is carried out directly, by 
the buyer verbally informing the seller of his telephone 
number, or by means of reading a support that contains 
the buyer's telephone number. Obviously the buyer can 
communicate his mobile telephone number by any proc- 
ess and conventional device with an equivalent function. 
[0055] After having verified the identity of the buyer 
and of the seller, verifying that both have been sub- 
scribed to the transaction and payment center, the proc- 
ess of the invention comprises the step of transmitting, 
to the buyer's mobile telephone by means of a connec- 
tion from the transaction and payment center, a confir- 
mation re-quest that he agrees with the collection order 
or re-quested transaction, that was carried out by means 
of the prior transmission of the amount of the purchase 
or identification code of the product that is being pur- 
chased. The data of the transaction are included in this 
request. 

[0056] Then the buyer confirms the collection order 
by means of entering and transmitting his secret identi- 
fication code, by means of his mobile telephone, to the 
transaction and payment center, wherein it is verified. 
[0057] In order to carry out the communication be- 
tween the transaction and payment center and the buy- 
er's mobile telephone, it has been provided for that the 
process comprises a consultation step, on the part of 
the transaction and payment center, of a data base pro- 
vided therein, a data base that contains the character- 



istics of each buyer's mobile telephone and from this 
consultation mobile telephone communication equip- 
ment is selected from among the following, equipment 
that are included in the transaction and payment center 
5 itself: 

Short Message Centers (SMC), from which the 
Short Message Service (SMS) defined in the ETSI 
specifications 03.38, 03.40, 04.11 , 09.02, is permit- 

10 ted/carried out. By means of this system it is possi- 
ble to exchange messages of up to 160 characters 
between mobile telephones or between mobile tel- 
ephones and applications. Common short message 
centers, as well as specifically designed message 

f5 centers will be used for the present transaction and 
payment system in order to permit synchronous 
communication between mobile telephones and the 
transaction and payment center. Said centers will 
be used in all short message communications end- 

20 ed in a mobile telephone. 

Unstructured Supplementary Service Data (USSD) 
Centers defined in the ETSI specifications GSM 
02.90, 03.90, 04.80 and 04.90, by means of which 
it is possible to establish continuous and interactive 

25 text dialogues between a mobile telephone and an 
application, started by the user of the mobile tele- 
phone (MAP step 1 and 2) as well as by the appli- 
cation (telephones MAP step 2), by means of the 
use of the so-called USSD operations. 

30 

[0058] The above-mentioned USSD operations as 
well as the short message service make use of the 
Stand-alone Dedicated Control Channel (SDCCH) in 
the interface between the mobile telephone and the 
35 base station, of the Direct Transfer Application Part 
(DTAP) operations from the base station to the Mobile 
Network Switching Center (MSC), and of the Mobile Us- 
er Application Part (MAP) operations between the MSC 
and the USSD centers and short message centers re- 
40 spectively. 

[0059] - By means of Wireless Application Protocol 
(WAP) that permits communication between mobile tel- 
ephones provided with suitable software and resident 
applications in Internet nodes, according to the specifi- 
cs cations of the WAP Forum (http://www.wap-fprum.org), 
using the short message or data services as transport 
in the cases of GSM networks. 
[0060] Therefore, the invention permits the exchange 
of information between the transaction and payment 
so center and the different types of mobile telephones, 
without the mobile telephones having to be modified, in 
such a way that payment can be made by any type of 
mobile telephone. 

[0061] The updating of the data base which includes 
55 the characteristics of each buyer's mobile telephone is 
done automatically for which purpose the transaction 
and payment center consults the nodes of the mobile 
telephone network. 
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[0062] In the secret identification code verification 
process, some of the following mechanisms intervene: 

Authentication and GSM ciphering that is based on 
the authentication center of the GSM network in 
which a Ki secret authentication code of each user 
resides. This same code resides inaccessibly in the 
user's Subscriber Identification Module (SIM). For 
access to the GSM network, the authentication 
center generates a RAND random number of 128 
bits, a number which entered in the non-standard 
algorithms A3 and A8, together with Ki code, re- 
spectively produce a SRES parameter and a Kc 
session code. These parameters are stored in a Vis- 
itor Location Register (VLR) of the authentication 
center transmitting the RAND random number to 
the SIM where the same process is carried out: the 
SRES parameter is returned to the network, which 
authenticates the user, and the Kc session code is 
stored in the mobile terminal. From this moment the 
communication of the mobile telephone with the 
Base Station Controller (BSC) is ciphered using the 
algorithm A5 with the Kc code. 
Authentication and ciphering by means of software 
included in the SIM Toolkit Card, which is a pro- 
gramming model of the SIM cards, described in the 
ETSI specifications GSM 11.11 and 11 .1 4. Irrespec- 
tive of the application of GSM ciphering that all the 
SIM cards carry out, SIM applications that carry out 
the same management of digital certificates that is 
presently carried out in personal computer applica- 
tions, can be developed. 

Authentication and ciphering by means of software 
in the mobile telephone, in the event that the mobile 
telephone has the necessary processing capaci- 
ties, the above-mentioned management of digital 
certificates can be carried out in the mobile tele- 
phone itself. 

[0063] The result of the local verification, just as it has 
already been indicated, is sent to the transaction and 
payment center in these last two cases. 
[0064] Furthermore for a purchase in person, after 
verification, in the transaction and payment center, that 
the secret code is correct, the process comprises a step 
of subtracting the amount of the transaction from the 
buyer's purse, and once the confirmation of the trans- 
action has been made to the buyer and to the seller, and 
after a certain amount of time, there is a step for up- 
dating the data of the transaction carried out, which 
leads to credit to the stores and debit to the buyers, in 
terms of the type of payment chosen. Two types of pay- 
ment have been defined by means of which the user of 
the service will be able to pay the amount of his purchas- 
es: 

Prepayment: The buyer previously charges an 
amount of money in his purse previously open in 
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the transaction and payment center. Once the pur- 
chases are made, the amount thereof is subtracted 
from this account in real time. 
Post-payment: The amount of purchases made dur- 
5 ing a month are entered in the user's purse and the 
total thereof will be billed monthly in the current ac- 
count indicated by the user. 

[0065] In both cases secondary accounts may be as- 
sociated to a main account, in such a way that several 
users, each one provided with his own mobile telephone 
and each one associated to a secondary purse, may use 
the service, in which a single holder appears. 
[0066] By means of the process of the invention, there 
is also the possibility of making a purchase in advance, 
in which case the process is identical to the one de- 
scribed for the purchase in person, with the difference 
that the buyer provides his telephone number to the sell- 
er by means of a connection of the buyer with the seller's 
service center or automatic sale system, from which the 
seller transmits the amount of the purchase or identifi- 
cation code of the product that is being purchased to the 
transaction and payment center. 
[0067] Then the transaction and payment center 
transmits to the seller, a collection code along with the 
amount of the purchase or identification code of the 
product that is being purchased. 
[0068] Furthermore, after subtracting the amount of 
the purchase from the buyer's purse, the confirmation 
is transmitted to the buyer so that the order collection 
code is transmitted to the buyer, and the stipulated de- 
livery time of the purchase that is being made is also 
transmitted. 

[0069] In this way, when the buyer is going to collect 
the purchased product, the collection code constitutes 
the receipt code, that guarantees that payment has 
been made and furthermore it represents the product 
that is going_to be delivered to the buyer. 
[0070] The invention also permits purchases to be 
made by Internet, in which case the store is a conven- 
tional virtual store that is communicated by Internet or 
by any type of network, with the transaction and pay- 
ment center. 

[0071 ] In this case the process is exactly the same as 
the one described for a purchase in person, but with the 
difference that the buyer transmits his telephone 
number to the virtual store by Internet. 
[0072] In the event that the purchase by Internet is 
done from a mobile telephone with WAP capacity, the 
buyer's telephone number will have been implicitly com- 
municated to the seller upon establishing the communi- 
cation between both, and the collection order is commu- 
nicated to the buyer, either by the processes described 
for a purchase in person, or else by the WAP communi- 
cation established between the transaction and pay- 
ment center and the buyer's mobile telephone. 
[0073] The invention also permits a purchase to be 
made from vending machines, in which case the proc- 
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ess is exactly the same as the one described for a pur- 
chase in person with the difference that now it is the buy- 
er who starts the transaction by means of a connection 
between his mobile telephone and the transaction and 
payment center, in such a way that identification thereof 5 
is carried out implicitly by the connection made; and the 
identification of the vending machine (seller) is made by 
transmitting an identification code of the machine asso- 
ciated to it, on the part of the buyer, by means of the 
connection made. Forthis purpose the vending machine 10 
should include a mobile telephone. 
[0074] Once the transaction and payment center has 
verified the identity of the buyer and of the vending ma- 
chine, a connection is made with said vending machine 
transmitting an activation signal thereof. This connec- 75 
tion is made by a mobile telephone that is included in 
the vending machine, which after activation carries out 
the following steps: displaying the buyer's identity on a 
screen, which permits the buyer to select/choose the 
product, and then the product is dispensed. 20 
[0075] In an embodiment of the invention, the charge 
orders accumulated in the vending machine are period- 
ically questioned by the transaction and payment center 
which processes all accumulated orders for. 
[0076] When the process of the invention is applied 25 
to a vending machine, the phases and means already 
described herein above in respect of the system of the 
invention, are used. 

[0077] The invention also permits the purchase of In- 
tellectual Property i.e. software files as mentioned here- 30 
in above, to be made by Internet, for which purpose the 
buyer provides his mobile telephone numberto the store 
on line, in this case a virtual store; and the collection 
transaction is started from this store just as it has been 
described in the case of payment by Internet, with the 35 
difference that in this case after clearing the files en- 
crypted in the buyer's equipment, the buyer requests the 
decryption codes from the transaction and payment 
center, these codes being generated by the seller and 
transmitted along a safe channel to the transaction and *o 
payment center, which determines the acknowledgment 
of the files and therefore delivery thereof, comprising the 
subsequent transmission step, on the part of the trans- 
action and payment center, of the decryption codes to 
the buyer's mobile telephone , wh ich constitutes the ver- 45 
ification of delivery of Intellectual Property. 
[0078] The invention may further be used to carry out 
functions of an electronic delivery note, in which case 
the seller carries out the connection between his mobile 
telephone and the transaction and payment center, in 50 
such a way that the seller is implicitly identified by the 
connection made wherein the identification code of the 
product that is going to be delivered is transmitted, in 
such a way that after making said identification the seller 
requests a control number from the transaction and pay- 55 
ment center, in order to make the delivery of a product 
to the buyer. Then the transaction and payment center 
by means of a connection with the buyer, transmits it the 



control number requested by the seller, as well as the 
product that is going to be delivered, and then his secret 
code is requested, which after being entered by his mo- 
bile telephone, this implies acknowledgment of the de- 
livery and acceptance of the product. 
[0079] In this way the physical receipt is replaced by 
the described process, permitting automation of the sell- 
er's logistic control eliminating paper, for which purpose 
a data base accessible to the seller is provided for. 
[0080] In respect of this latter case it should be point- 
ed out that the transaction may or may not be accom- 
panied by payment, depending on what has been 
agreed upon between both parties. 
[0081] Obviously, the operational and technical char- 
acteristics as described hereinbefore in respect of the 
system, are also applicable to the process of the present 
invention and viceversa. 

BRIEF DESCRIPTION OF THE FIGURES 

[0082] The invention will be hereafter be described on 
the grounds of drawings in which 

Figure 1 is a functional block diagram of a possible 
embodiment of the system of the invention for mak- 
ing a purchase in person, a purchase in advance, 
and a purchase by Internet, 
Figure 2 shows a functional block diagram of a pos- 
sible embodiment of the system of the invention in 
order to make the purchase from a vending ma- 
chine, 

Figure 3 shows afunctional block diagram of a pos- 
sible embodiment of the system of the invention for 
purchasing Intellectual Property by Internet, 
Figure 4 shows a possible embodiment of a func- 
tional block diagram of the system of the invention 
for carrying out the functions of an electronic deliv- 
ery note according to the process of the invention, 
Figure 5 shows a functional block diagram of a pos- 
sible embodiment of the system of the invention for 
making a purchase by catalogue, a purchase in re- 
sponse to television commercials or pay per view, 
Figure 6 shows a functional block diagram of a pos- 
sible embodiment of the system of the invention in 
order to carry out a transaction between users, 
Figure 7 shows a schematic representation of an 
embodiment of the interrelation of the various 
means constituting the first server included in the 
transaction and payment center represented in the 
preceding figures. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0083] A description is made hereinafter of the inven- 
tion on the grounds of the above-cited figures. 
[0084] Figure 1 illustrates the process for purchases 
in person, in other words the purchases wherein a payer 
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(1 3), who in this case is a buyer, goes to the store of the 
payee (14), who in this case is a seller in order to make 
the purchase. 

[0085] In order to make the purchase it is necessary 
for the seller (14) and the buyer (13) to be subscribed 5 
to a transaction and payment center (17), for which pur- 
pose each buyer (13) is assigned a secret code that is 
related to his mobile telephone number 
[0086] In the purchase in person the buyer (13) com- 
municates, by means of a step (1a), to the seller (14) 10 
his Mobile Station International Number Integrated 
Services Digital Network Number (MSISDN) or a 
number related thereto, different from the secret identi- 
fication code. This step (la) is carried out either orally or 
by means of an optical pencil provided for in the equip- 1$ 
ment of the seller (15), a pencil which reads a bar code 
of a label or customer's card. For example, this card can 
be adhered to the mobile telephone (16) of the buyer 
(13). 

[0087] The seller (14), by means of the equipment 20 
(15) establishes a communication (2a) with a transac- 
tion and payment center (1 7) in order to request author- 
ization of a transaction. In the communication (2a) a col- 
lection order that contains the buyer's (13) MSISDN or 
the number related thereto is transmitted, as well as the 25 
amount of the transaction whose authorization is being 
requested. 

[0088] As an example, the equipment (15) can be 
comprised of a compact mobile terminal based on a mi- 
croprocessor which stores the corresponding program- 30 
ming that permits the sale application according to the 
invention to be made, and that includes a screen, a key- 
board and a mobile telephone with USSD step 2 com- 
munication capacity, in order to make the different com- 
munications with the transaction and payment center 35 
(17) by means of a mobile telephone. 
[0089] In order to permit the establishment of the com- 
munication (2a), the transaction and payment center 
has USSD mobile communication equipment (19) by 
means of which the communication (2a) with the mobile 40 
telephone of the seller's equipment is established. 
[0090] Moreover, the transaction and payment center 
(1 7) has an on line transaction and payment server (20) 
that includes a data bank (21) for storing the types of 
the mobile telephones (16) of each buyer (13) and of 45 
each seller (14), as well as the telephone number of 
each one of them; and that also includes a data bank 
(22) which stores the data referring to the transaction 
and payment center (1 7), 

[0091] Said data bank (22) also stores first informa- 
tion on each buyer (13) and second information on each 
seller (14) being subscribed to the payment service ma- 
terialized by the transaction and payment center (17); 
for which purpose the data bank (22) stores the buyers' 
telephone numbers, the secret code that is assigned to 
each buyer upon being subscribed to the payment serv- 
ice and a code of each buyer being his/her telephone 
number or a thereto related number. In the event that a 
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number related to the buyer's telephone number is 
transmitted, this number is also stored in the data bank 
(22). 

[0092] Hence, the server (20) verifies by means of first 
verifying means (20a) the merchant's identity by means 
of the source of the communication (2a), since his/her 
telephone number is implicit in the connection made by 
the equipment (1 5), and furthermore it verifies by means 
of the means (20a) that the buyer's telephone number 
transmitted, or the number related thereto, corresponds 
to a subscriber of the payment service and if the verifi- 
cation is correct it generates an acceptance message. 
[0093] Furthermore the server (20) verifies by means 
of second verifying means (20b) a pre-established au- 
thorization criterion by verifying the buyer's balance or 
amount of credit, by means of step (3). The verification 
of the balance is made in a purse previously opened in 
the data bank (22) and if the verification is correct, a 
second acceptance message is generated. 
[0094] If the previous verifications provide a positive 
result and as a result the acceptance messages have 
been generated, communication with the buyer (13) is 
established. In this communication the server (20) trans- 
mits to the buyer's (13) mobile telephone (16) a collec- 
tion order confirmation request (5a) or (5b), either by 
means of the USSD mobile communication equipment 
(1 9) (5a) or mobile communication equipment material- 
ized by a Short Message Center (18) (SMC) (5b), de- 
pending on the type of mobile telephone (16) owned by 
the buyer (13), in such a way that communication with 
any type of mobile telephone that the buyer has ac- 
quired, is permitted. 

[0095] For the selection of the step (5a) or (5b), the 
server (20) consults, by means of step (4) , the data bank 
(21 ), by means of the selecting means (20h), in order to 
verify what type of mobile telephone the buyer (1 3) owns 
and in order to select the equipment (1 8) or (1 9) through 
which the communication is carried out. 
[0096] At this stage it should be pointed out that the 
data base (21 ) is updated automatically by means of one 
or more of the possibilities already described hereinbe- 
fore in chapter "Description of the Invention", by means 
of a consultation process of the nodes of the mobile 
communication network, in which the International Mo- 
bile Equipment Identifier (IMEI) of the buyers' (13) mo- 
bile telephones (16) are recorded, and from which the 
system knows said characteristics. 
[0097] Figure 7 show, inter alia, an embodiment of the 
first server (20) with a plurality of materializations of in- 
quiry and updating means for inquiring and updating the 
IMEI codes, in all of which each second information con- 
tained in the second data storage means (21) and re- 
ferring to the type of digital mobile telephone (16,40) 
contained in the second data storage means in respect 
of each admissible telephone number of each associat- 
ed payer (13) and each admissible identification code 
of each payee (40) (when this latter code is a number 
of a digital mobile telephone as will be explained herein 
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below), is a first identifying code being representative of 
a IMEI code. 

[0098] Thus, in a first materialization, the first inquiry 
means (20r) extract the IMEI code associated to each 
admissible phone number, from an Equipment Identifier 5 
Register (EIR) that contains an association between 
each admissible telephone number and the IMEI code 
corresponding to each admissible telephone number, 
and which receive said association from each Visitor Lo- 
cation Register as updated by said Visitor Location Reg- 
ister. 

[0099] In a second materialization, the first inquiry 
means (20r) extract the IMEI code associated to each 
admissible telephone number, from an Unstructured 
Supplementary Service Data (USSD) frame into which 
each Visitor Location Register associated to each Mo- 
bile Switching Center (MSC) which has issued said 
frame, has inserted the IMEI code associated to the ad- 
missible telephone number corresponding to the user 
who has originated said frame. 
[0100] In a third materialization, the first inquiry 
means (20r) extract the IMEI code associated to each 
admissible telephone number, through an interface be- 
tween the Visitor Location Register and said inquiry 
means (20r). 

[0101] In a fourth materialization, the first server (20) 
comprises second inquiry means (20t) for inquiring the 
IMEI code corresponding to each admissible telephone 
number, in Call Data Registers (CDR) of a data bank of 
a mobile telephony network operator, that contain a re- 
lation of each telephone number which, on the grounds 
of a call, has originated a Call Data Register with an IMEI 
code of the terminal from which said call originated, and 
second updating means (20 u) for updating said second 
information in the second data storage means (21) on 
he basis of a comparison of each IMEI code inquired by 
the second inquiry means (20t) with each code being 
representative of the IMEI code associated to each ad- 
missible telephone number, contained in the second da- 
ta storage means (21). 

[0102] In a fifth materialization, the second informa- 
tion further comprises at least one datum being indica- 
tive of a communication capacity selected from a capac- 
ity of managing sessions according to Wireless Appli- 
cation Protocols (WAP), a capacity of managing ses- 
sions of Unstructured Supplementary Service Data 
(USSD), and combinations thereof, of each digital mo- 
bile telephone identified by an IMEI code and associated 
to an admissible telephone number. 
[0103] Finally, in a sixth materialization, the first serv- 
er (20) comprises second inquiry means (20t) for inquir- 
ing the IMEI code corresponding to each admissible tel- 
ephone number, in Call Data Registers (CDR) of a data 
bank of a mobile telephony network operator, that con- 
tain a relation of each telephone number which, on the 
grounds of a call, has originated a Call Data Register 
with an IMEI code of the terminal from which said call 
originated, second updating means (20u) for updating 



said second information in the second data storage 
means (21) on he basis of a comparison of each IMEI 
code inquired by the second inquiry means (20t) with 
each code being representative of the IMEI code asso- 
ciated to each admissible telephone number, contained 
in the second data storage means (21). 
[0104] Obviously, although figure 7 shows a plurality 
of materializations coexisting in the first server (20), the 
system of the invention may comprise only one or some 
of said materializations. 

[01 05] In the event that the mobile telephone (1 6) has 
USSD version 2 capacities, step (5a) is carried out by 
means of the transmission of a USSD frame, a process 
by means of which the connection between the mobile 
telephone (1 6) and the server (20) is open. Upon receiv- 
ing this frame, the mobile telephone (16) displays on the 
screen the authorization request with the details of the 
collection order. 

[0106] In the event that the mobile telephone (16) 
does not have USSD version 2 capacities, this request 
is made by the transmission (5b) of a class 0 short mes- 
sage with the de-tails of the collection order and instruc- 
tions to transmit the authorization. Upon receiving a 
class 0 short message, the mobile telephone (16) dis- 
plays it on the screen, without the need of the user nav- 
igating through the structure of menus stored in his mo- 
bile telephone. A short message center (1 8), that is 
characterized in carrying out synchronous communica- 
tions, is used to transmit these confirmation request 
messages. 

[0107] Returning to figure 1 , it can be appreciated that 
the buyer (13) confirms the collection order received 
(5a) or (5b) by entering (6) the secret code that was as- 
signed to him upon being subscribed to the service, by 
means of the keyboard of his mobile telephone. This 
identification code can be locally verified, in the mobile 
telephone, by step (33) in the event that the mobile tel- 
ephone has SIM card authentication mechanisms. In 
this case, step (7d) is carried out, a step in which the 
result of the encrypted local authentication is transmit- 
ted to the payment server by means of a short message 
directed to the above-mentioned synchronous short 
message center (18). In this case the transaction and 
payment center decrypts and verifies the result of said 
verification from the user's secret identification code that 
is stored. 

[01 08] If these mechanisms are not available, the se- 
cret code is transmitted by using the ciphering of the 
mobile communication network described in the De- 
scription of the Invention, by means of any of the proc- 
esses indicated hereinafter: 

[0109] In the event that it is a mobile telephone (16) 
with USSD version 1 and 2 capacity, that has received 
the request by step (5a), the secret identification code 
that the buyer has keyed in step (6) is transmitted by 
step (7a) over the connection that was opened in said 
step (5a). 

[0110] In the event that it is a mobile telephone with 
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USSD version 1 capacity, that has received the request 
by step (5b), the sequence that the buyer has keyed 
consists of a USSD service code, followed by the secret 
code, and it is transmitted by step (7b) in a USSD ver- 
sion 1 operation frame originated in the mobile tele- 
phone. 

[0111] In the event that it is a mobile telephone without 
USSD capacity, that has received the request by step 
(5b), the sequence that the buyer (13) keys consists of 
the secret code, that is transmitted by step (7c) in a short 
message, by a response to step (5b), either to a short 
number assigned to said service by the operator, de- 
pending on the buyer's (13) mobile telephone (16) 
number. 

[0112] Then the server (20) verifies by means of third 
verifying means (20c) the secret code transmitted by the 
buyer (13). The verification is carried out by means of 
step (8), and in the event that the verification result is 
positive, a third acceptance message is generated. 
[0113] The server (20) has authorizing means (20d) 
which when it receives the three authorization messag- 
es, it authorizes some account management means 
(20e) included in the server (20) to subtract the amount 
of the transaction from the buyer's purse/credit account 
and to credit said amount to the seller's account by 
means of step (9); and it transmits the confirmation of 
the transaction to the seller's (15) terminal as well as to 
the buyer's (13) mobile telephone (16) by means of 
steps (10). This confirmation is carried out by means of 
some confirmation message generating means (20g) in- 
cluded in the server (20). These means (20g) can also 
confirm to the buyer (13) and/or to the seller (14) the 
verifications carried out by the means (20a) and (20b). 
[0114] Then by step (11) which is an off line step, the 
data are updated towards an administration and man- 
agement server (23), from which the subscriber proc- 
esses are forwarded to the stores and the debits to the 
buyers, depending on the type of payment selected, by 
the specific applications built in relation with the financial 
entities, with which communication is established by 
means of line (26). In order to carry out this function, the 
administration and management server (23) has a data 
bank (24) of the stores, and a data bank (25) of the buy- 
ers. 

[01 1 5] The server (20) has rejection message gener- 
ating means (20f), which when at least one of the ac- 
ceptance messages has not been generated, it trans- 
mits a rejection message to the seller and/or to the buy- 
er. 

[0116] The operation described is identical for the 
case in which the purchase is made by Internet, in which 
case the payer is a buyer (13) and the payee is a virtual 
store (27) to which the buyer transmits his mobile tele- 
phone number, or the number related thereto, by step 
(1 b), by means of the communication between the buyer 
(13) and the virtual store (27), just as it is conventionally 
done in this type of purchase, in other words, by Internet. 
[0117] Then the virtual store (27) transmits a collec- 



tion order (2b), equivalent to a previously described col- 
lection order (2a), but with the difference that this col- 
lection order is transmitted to a network (28) by means 
of which the communication with the server (20) is es- 
5 tablished. 

[01 1 8] In this case the process is the same as the pre- 
viously described one, for which purpose the transmis- 
sion of the confirmation by step (1 0) is done by the com- 
munication network (28). 

10 [01 1 9] The communication network (28) can be Inter- 
net, a digital integrated service network, the switched 
telephone network or any other network. 
[0120] These accesses will be provided with the safe- 
ty mechanisms necessary for each case. 

15 [0121] Furthermore, the process illustrated in figure 
1, also permits purchases with payment in advance to 
be made, for which purpose in this case, the buyer (13) 
informs the seller (14) of his telephone number by 
means of a telephone connection with a service center 

20 or by an automatic sale system that the seller has oper- 
ative for this purpose. As of this point the process is the 
same as the one for a purchase in person, but with the 
difference that when the seller communicates with the 
transaction and payment center (1 7), he transmits along 

25 with the data of the transaction and with the buyer's (1 3) 
telephone number, an instruction indicating a purchase 
with payment in advance that is detected by some first 
detecting means (20i) included in the server (20), which 
also has a collection code generating means (20j) by 

30 means of which a collection code is generated upon de- 
tecting said instruction. This code is transmitted to the 
buyer and seller in step (10), along with the described 
confirmation of this step 10. In this way, when the buyer 
goes in person to the seller's (14) store, the previously 

35 ordered product, should inform him of the collection 
code so that the seller may know who the buyer in ques- 
tion is and which product should be handed overto him. 
[0122] This operating mode is particularly useful in 
those stores that produce the production of a product 

40 only under the premise that the product is already paid 
for, for example perishable goods, and therefore, there 
is certainty that although the product is not collected lat- 
er on, the price thereof has already been collected. This 
schema is only possible when the transaction is done 

45 on line. The providing of the collection code by the buyer 
to the seller constitutes the verification that payment has 
already been made in advance. 
[0123] By means of the system and process of the in- 
vention, payments can also be made in vending ma- 

50 chines, which is illustrated in figure 2. 

[0124] In this case the payee is a vending machine 
(29), which should include a mobile telephone with short 
message and data communication capacity. 
[0125] The buyer (13) reads from the vending ma- 
ss chine (29) an identification code of the machine, which 
has been represented by step (30). 
[0126] Then the buyer (13) by means of a communi- 
cation (31a) or (31b), depending on the type of mobile 
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telephone (1 6) he has, as it has already been previously 
described, transmits the identification code of the vend- 
ing machine (29) to the server (20). 
[0127] This step would be equivalent to step (2a), 
(2b), described above, but with the difference that the 
buyer's identification is now carried out implicitly by the 
connection (31 a) or (31 b), and the store's identification, 
in this case the vending machine (29) is carried out by 
the code transmitted by the buyer. 
[0128] The transaction and payment center verifies 
the customer's identity, his balance or credit limit, the 
type of mobile telephone (16) and the mobile telephone 
number that the vending machine (29) is provided with. 
This is done by steps (3) and (4). 
[0129] Steps (5a) (5b), (6), (7a), (7b), (7c), (7d), (8) 
and (9) are identical to the ones described above. 
[0130] Then an activation order (32) of the vending 
machine is transmitted by the mobile telephone network 
(equipment 1 8 or 1 9) . This activation order is carried out 
by the communication with the mobile telephone of the 
vending machine (29), forwhich purpose the transaction 
and payment center (17) establishes communication 
with the mobile telephone of the machine, which upon 
receiving said order, is activated in the same way as if 
coins had been inserted therein. Along with the activa- 
tion order of the vending machine (29), the buyer's (13) 
identification is transmitted, in such a way that the vend- 
ing machine displays it on a screen and then the buyer 
selects and obtains the desired product according to 
step (31). For this purpose the first server (20) closes 
the communication with the vending machine (20) and 
allow the payer to make a selection by the display or 
keyboard of the vending machine (29). 
In an embodiment of the system when being applicable 
to a vending machine, the confirmation message gen- 
erating means (20g) establish a communication be- 
tween the mobile telephone o(16) of the payer (13) and 
the vending machine (29) during a p reestablished peri- 
od of time during which the payer (13) may transmit, 
through the first server (20), a selection message to the 
vending machine (29), i.e. the selection of the product 
is made by means of the mobile telephone (1 6) instead 
of by the display of the vending machine. After expiration 
of this period of time, the communication between the 
first server (20), the vending machine (29) and the payer 
(13) is closed. 

[0131] There is also the possibility of the first server 
(20) comprising deactivation detecting means (200) for 
detecting deactivation of the vending machine (29) 
which in this case also have the function of closing the 
communication between the first server (20), the vend- 
ing machine (29) and the payer (13). 
[0132] The vending machine (29) periodically, when 
it is questioned by the transaction and payment center 
(17), transmits to the server (20) the record of purchases 
and the users that have made them, according to step 
(12). For this purpose, the first server (20) comprises 
transaction recording means (20p) which record the 



transactions recorded in each vending machine (29) 
said recording means being associated to the authori- 
zation means (20d). 

[0133] Step (1 0) is carried out upon making the peri- 
5 odic clearance of the purchases made. 

[01 34] In certain circumstances, such as for example 
the case in which the amounts of the transaction to be 
made are low, it could happen that it is not necessary to 
enter the buyer's secret code, in which case the steps 
to corresponding to this operation would be eliminated. 
[0135] The system of the invention is also applicable 
in_for processing purchases by Internet or other remote 
channels, which is illustrated in figure 3. 
[0136] The buyer (13) (payer) by Internet, provides on 
*5 line by means of step (1 ), his/her telephone number to 
the virtual store (27) (payee). Step (2), that consists of 
transmitting to the server (20) the collection order that 
contains the telephone number and the amount of the 
purchase to be made, is carried out from the virtual store 
20 (27) and by means of a network (28). In this operation 
the server (20) verifies the identities of the buyer and of 
the seller and generates a connection to the buyer's (1 3) 
mobile telephone (16), by means of the equipment (1 8) 
or (1 9) depending on the type of telephone that the buy- 
25 erowns, in order to transmit a message that informs him 
of the store's identity, of the amount of the purchase and 
the secret code is requested according to the steps il- 
lustrated in figure 1 . After verifying that there is an avail- 
able balance, the transaction is confirmed to the buyer 
30 (13) and to the virtual store (27). Steps (1 ) to (10) are 
thus identical to the those already described herein 
above. Then the virtual store clears on line the software 
files encrypted in the buyer's (13) computer by Internet 
according to step (34). When the buyer (13) has re- 
35 ceived them, the decryption codes are requested from 
the server (20) by steps (12a) or (12b), depending on 
the type of mobile telephone. These codes are gener- 
ated by the seller (27) and transmitted by a safe channel 
to the server (20) at the request thereof. Then the serv- 
^0 efs (20) confirmation message generating means (20g) 
generates a confirmation message that contains the de- 
cryption code of the software file that is transmitted to 
the buyer by means of steps (13a) or (13b), depending 
on the type of the buyer's (13) mobile telephone (16), 
45 and finally, the data are updated in the server (20) and 
in the administration and management server (23) by 
means of step (11) off line. 

[0137] Furthermore, the system of the invention per- 
mits application thereof as an electronic delivery note, 

so which is illustrated in figure 4. 

[0138] When a supplier (14a) (payee) makes the de- 
livery to a buyer's (13) premises, the supplier (14a) by 
a mobile telephone (15a) previously makes a commu- 
nication (2c) with the transaction and payment center 

55 (1 7) to which the identification code of the product that 
is being purchased and the buyer's telephone number 
are transmitted, and furthermore a delivery code such 
as for example a control number is requested. For this 
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purpose the seller transmits a second delivery manage- 
ment instruction that is detected by some second de- 
tecting means (20k) provided for in the server (20). Once 
the center (17) verifies the supplier's (14a) identity by 
the communication (2c), and as of said detection, by 5 
means of some generating means (201) of a delivery 
code, said code is generated and transmitted to the sell- 
er by step (35), in such a way that the center (1 7) iden- 
tifies the type of the buyer's mobile telephone by step 
(4) and communicates with it by a connection (36a) or 10 
(36b), depending on the type of the buyer's (13) mobile 
telephone (16) just as it has already been explained. In 
the communication (36a) or (36b), the buyer (13) re- 
ceives the data regarding the control number of the 
product that is delivered and the request of his secret *5 
code. For this purpose, the server (20) has message 
generating means (20m) for identifying said product or 
service. 

[0139] Then the buyer enters his secret code, which 
implies acknowledgment of the delivery and acceptance 20 
of the product. The server (20) verifies that the data are 
correct by step (8a) in the manner already described in 
previous examples (step 8). Then by means of delivery 
management processing means (20 n) included in the 
server (20), a entry is generated in a delivery note data 25 
base (37) and the delivery is confirmed to both by step 
(10). Finally the data of the delivery are updated by step 
(lla) off line in the administration and management serv- 
er (23). The server's (20) data base (37) is accessible 
to the supplier permitting him to conduct a computer 30 
control of the status of his deliveries, a control that bears 
the digital signature of acceptance of his customers by 
the transmission of the control number and the secret 
code. This is done by step (38). 

[0140] In this way, the physical receipt that is conven- 35 
tionally handed over to the buyer is replaced by the de- 
scribed process. 

[0141] Likewise, this step (38) can be carried out with 
a purchase in person, a purchase in advance and a pur- 
chase by Internet, which were previously described. *o 
[0142] These transaction may or may not be accom- 
panied with payment. 

[0143] Figure 5 shows another possible embodiment 
of making a purchase by a product or a service code, 
that consists of assigning a code to the product or serv- 45 
ice in order to make a purchase by catalogue; a pur- 
chase in response to any type of commercial or adver- 
tisement, such as for example, television commercials 
or written advertisements, a pay per view, or any other 
type of purchase in which the indicated possibility is as- 50 
signed. 

[0144] In this case, for making the purchase, once the 
buyer knows the code assigned to the product that he/ 
she wants to buy, the buyer calls the transaction and 
payment center (1 7) with his mobile telephone, estab- 55 
lishing a communication (45a) or (45b), depending on 
the type of mobile telephone that the buyer (13) owns. 
The communication (45a) is established by means of 



the mobile communication equipment (19), and the 
communication (45b) is established by means of the 
short message center (1 8), just as it has been explained 
in the preceding cases. 

[0145] By communication (45a) or (45b), the buyer 
transmits the telephone number corresponding to the 
product that he wants to buy This telephone number 
comprises a part indicating the code of the product that 
he wishes to buy, and another part indicating the seller's 
identity, and this is stored in the data bank (22). 
[0146] At this point, it should be pointed out that, ac- 
cording to a further embodiment of the invention, there 
is the possibility that the telephone number itself dealt 
by the buyer for communicating with the transaction and 
payment center (17), permits access to the code of a 
series of different sellers, that are stored in the data bank 
(22), in such a way that when the transaction and pay- 
ment center receives this telephone call, it has access 
to said data bank (22) and it transmits a message with 
the different options of the sellers to the buyer. As of this 
point, the selection, first of the seller, and then of the 
product that is to be purchased may be made. According 
to another embodiment, there is also the possibility that 
the number dialed by the buyer in order to have access 
to the transaction and payment center (17) refers to a 
specific seller, stored in the data bank (22) of the trans- 
action and payment center, in such a way that the trans- 
action and payment center (17) transmits a message 
with said seller's different products to be selected to the 
client. 

[01 47] This structure has the advantage that the user 
does not need to know the codes of the products, but 
rather on the contrary, the user can have access to the 
products of a specific seller, or of several sellers, by 
phoning a generic telephone number. 
[0148] In any case, the selection of the mobile com- 
munication equipment (18,19) for establishing the com- 
munication (45a) or (45b) with the buyer, is carried out 
by means of step (4), in which the server (20) consults 
the data bank (21 ), just as it has already been explained, 
in order to determine what type of mobile telephone the 
buyer (13) owns. 

[0149] Likewise, in this case the server (20) verifies 
the buyer's identity by means of the source of the com- 
munication (45a) or (45b), since his telephone number 
is implicit in the connection made, and furthermore it ver- 
ifies that the telephone number of the product corre- 
sponds to a seller subscribed to the payment service, 
and it determines the product that is purchased and the 
price thereof from the code received. This code, just as 
it has been indicated can be obtained directly from the 
number dialed by the buyer, or indirectly from the seller 
or sellers that the initially dialed telephone number re- 
fers to. 

[0150] There is the possibility that the data referring 
to each product of each seller are stored in the equip- 
ment of the seller himself (46), in which case the trans- 
action and payment center (17) questions the seller 
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(46), by means of the communication network (47) that 
connects them , about the price and product to which the 
buyer is referring. The seller (46) responds with the ad- 
equate data and the transaction and payment center 
(17) informs the buyer (13) thereof. 5 
[0151] Then step (3) for verifying the balance is car- 
ried out in any of the indicated cases, and if the previous 
verifications give a positive result the previously de- 
scribed steps (5a) or (5b) for confirming the collection 
order are generated. 10 
[0152] Then the buyer (1 3) confirms the collection or- 
der (5a) or (5b) received, the secret code being intro- 
duced by means of the keyboard of his mobile telephone 
and being verified by means of step (8) from the previ- 
ously described steps (33) and (7d) or (7a), (7b) or (7c). « 
[0153] In the event that the result of the verification is 
positive, the amount of the transactions is subtracted 
from the buyer's purse/credit account and the amount 
is credited to the seller's account by means of step (9), 
and the identification of the buyer and of the purchased 20 
product are communicated to the seller (46) by means 
of a communication network (47) so that th e seller sends 
the purchased product to the buyer's domicile. Further- 
more, the confirmation of the transaction is sent by 
means of steps (10). 25 
[0154] Thereafter, previously described step (11) is 
carried out. 

[0155] By means of the network (47), the seller (46) 
updates the data base (22) of the transaction and pay- 
ment center (17) regarding its products, prices and 30 
codes that affect them, each time that said sellers make 
a modification thereof, when these data are stored in 
said center (17). 

[0156] In the event that it is a pay per view, the buyer 
starts the typical transaction by telephoning the number 35 
that appears on the television screen, from which the 
transaction and payment center (17) communicates 
with the television broadcasting center that broadcasts 
the selected decoded program, and to which the buyer 
who is selecting the purchase of the program is indicat- *o 
ed. In other words, it operates just like in the case of 
delivering a physical product, except that in this case 
the seller delivers a television signal. 
[01 57] Figure 6 shows another possible embodiment 
whereby transactions between users (1 3) and (40) who *5 
own a mobile telephone (16), (41), respectively, and 
who are obviously subscribed to the transaction and 
payment center (17) are made possible in the above- 
mentioned manner. 

[0158] In this case the user (13) constitutes a payer, so 

and the user (40) constitutes a payee. 

[0159] Hence, when a payer (13) wishes to carry out 

a transaction in favor of a payee (40), a communication 

(39a) is established with the short message center (1 8) 

or a communication (39b) is established with the mobile ss 

communication equipment (19), depending on the type 

of mobile telephone that the user has. 

[0160] In this case, the payment order that contains 



the payee's (40) telephone number or the number relat- 
ed thereto is transmitted in the communication (39a) or 
(39b) and furthermore, the amount of the transaction 
whose authorization is being requested, is transmitted. 
This may correspond, for example, to a debt that is to 
be settled, or to a credit that is to be made. 
[01 61 ] In this case the transaction and payment cent- 
er stores the data corresponding to the payee (40) in its 
data banks (21) and (22), in the same way that it does 
with the payer (13). 

[0162] The selection of the communication equipment 
in order to establish the communication (39a) or (39b) 
is carried out by means of step (4). 
[0163] The payer's (13) identity and the payee's (40) 
telephone number are verified by means of the origin of 
the communication (39a) or (39b) and then, the payer's 
balance is verified by means of step (3). 
[01 64] When the previous verifications give a positive 
result, steps (5a), (6) and (7a), or (5b), (6) and (7b), or 
(5b), (6) and (7c), and finally step (8) are carried out in 
the manner that has already been described. 
[0165] Then the server (20) transmits a payment or- 
der confirmation request (5c) or (5d) to the payee's (40) 
mobile telephone (41), depending on the type of mobile 
telephone that the payee (13a) owns. This is selected 
by means of step 4. 

[01 66] For the selection of steps (5c) or (5d) , the serv- 
er (20) carries out a process identical to the one de- 
scribed for steps (5a) or (5b), in such a way that steps 
(7) and (7f) are identical to steps (7a) and (7b), and steps 
(7g) and (7f) are identical to steps (7c) and (7d). 
[0167] Firstly, the server verifies the secret code sent 
by the payee (40) by means of step (8), and in the event 
that the result of the verification of both secret identifi- 
cation codes corresponding to the payer and the payee 
is positive, the amount of the transaction is subtracted 
from the payer's purse or credit account by means of 
step (9) and the amount of the transaction is credited to 
the payee's purse/credit account by means of said step 
(9) and then, the confirmation is transmitted to the payer 
(13) and to the payee (40) by means of steps (1 0). 
[0168] Finally, step (11) is carried out in the manner 
that has already been described. 
[0169] Obviously, there is the possibility that thetrans- 
action may be started by the payee (40), in which case 
the process is carried out in the reverse manner from 
the one described, in other words, the confirmation of 
the payee's secret code is requested and then the con- 
firmation of the payer's secret code is requested. 



Claims 

1 . A system for processing payments and transactions 
between payers (13) and payees (27, 29, 14, 14a, 
13a, 46) associated to the system, using at least 
one communication by means of digital mobile te- 
lephony, the system comprising 
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a first server (20) interconnected with telecom- 
munication means (1 8, 1 9, 28, 47) with first da- 
ta storage means (22), and including account 
management means (20e) that process first da- 
ta of an account of each associated payer (13) 5 
and second data of an account of each associ- 
ated payee (27, 29, 14, 14a, 40, 46); 
wherein 

the first telecommunication means (18, 19, 28, 
47) selectively communicate the first server 10 
(20) with a digital mobile telephone unit (16) 
identified by an admissible telephone number 
of an associated payer (1 3) and with a telecom- 
munication terminal (15, 15a, 27, 29, 41, 46) 
identified by an admissible identification code *s 
of an associated payee (27, 29, 14, 14a, 40, 

46) ; the telecommunication means (18, 19, 28, 

47) comprising a plurality of telecommunication 
equipments (18, 19); 

the first data storage means (22) contain first 20 
information on each associated payer (13), said 
first information comprising at least the admis- 
sible telephone number, at least a pre-estab- 
lished authorization criterion for authorizing at 
least one transaction that requires a payment 25 
from the associated payer's (13) account and 
at least a safety criterion associated univocally 
to the associated payer's (13) telephone 
number, as well as some second information on 
each associated payee (27, 29, 1 4, 1 4a, 40, 46) 30 
that comprises at least the admissible identifi- 
cation code; 

the first server (20) comprising 

35 

first verifying means (20a) for verifying in the 
data storage means (22) whether a first mes- 
sage received through the telecommunication 
means (18, 19, 28, 47) contains an admissible 
telephone number of an associated payer (13) 40 
and an admissible identification code of an as- 
sociated payee (27, 29, 14, 14a, 40, 46), said 
first verifying means (20a) generating a first ac- 
ceptance message when they detect an admis- 
sible identification code and an admissible tel- 45 
ephone number; 

second verifying means (20b) for verifying in 
the data storage means (22) whether a trans- 
action authorization request received through 
the telecommunication means (1 8, 1 9, 28, 47) 50 
in addition to the admissible telephone number 
detected by the first verifying means, satisfies 
said pre-established authorization criterion, 
said second verifying means (20b) generating 
a second acceptance message when the au- 55 
thorization request satisfies said authorization 
criterion; 

third verifying means (20c) for verifying in the 



first data storage means (22) whether a safety 
parameter received through the telecommuni- 
cation means (18, 19) satisfies the safety crite- 
rion associated to the admissible telephone 
number detected by the first verifying means, 
said third verifying means (20c) generating a 
third acceptance message when they detect 
that the safety parameter satisfies the safety 
criterion associated to the admissible tele- 
phone number; 

authorization means (20d) for authorizing the 
account management means (20e) on the ba- 
sis of the authorization request, to process a 
debit in the associated payer's (13) account 
and to process a corresponding credit in the as- 
sociated payee's (27, 29, 14, 14a, 40, 46) ac- 
count as long as the first, second and third ac- 
ceptance messages have been generated; 
rejection message generating means (20f) for 
generating a rejection message when at least 
one of the acceptance messages has not been 
generated, and for transmitting the rejection 
message to the telecommunication means (1 8, 
19,28, 47); 

confirmation message generating means (20g) 
for generating at least a confirmation message 
when at least one of the acceptance messages 
has been generated, and for transmitting said 
confirmation message to the telecommunica- 
tion means (18, 19, 28, 47), and for selective 
transmission of the confirmation message to 
the mobile telephone (16,41) identified by the 
admissible telephone number in said first mes- 
sage, and to the telecommunication terminal 
(15,15a,27,29,41 ,46) identified by the admissi- 
ble identification code; 

second data storage means (21 ) that contain at 
least first information referring to the admissible 
telephone number of each payer (13), and at 
least second information referring to the type of 
digital mobile telephone (16, 41) belonging to 
each telephone number; 
selecting means (20h) for verifying in said sec- 
ond data storage means (21 ), the second infor- 
mation corresponding to the digital mobile tel- 
ephone unit (16, 41) identified by the admissi- 
ble telephone number and for selecting one of 
the telecommunication equipments (18, 19) 
that communicates with a digital mobile tele- 
phone (16, 41) identified by the admissible tel- 
ephone number by means of a telecommunica- 
tion service being compatible with the type of 
digital mobile telephone (16, 41) identified in 
said second information. 

2. A system according to claim 1 , wherein the admis- 
sible identification code of each payee (27, 29, 14, 
1 4a, 40, 46) is selected among a telephone number, 
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a number related to a telephone number, an Internet 9. A system according to claim 1 or 8, wherein the ac- 

code, a code representative of an Internet code, an count management means (20e) control at least a 

e-mail address, and a code based on an e-mail ad- first intermediate account of each payee (27, 29, 14, 

dress. 14a, 40, 46) contained in the first data storage 

5 means (22) and in which each credit is made. 



A system according to claim 1 , wherein the first ver- 
ifying means verify the payer's (13) admissible tel- 
ephone number from a code received through the 
telecommunication means (18, 19, 28, 47), repre- 
sentative of said admissible telephone number and 10 
contained in the first data storage means (22). 

A system according to claim 1 , wherein the second 
acceptance message generates an order to the tel- 
ecommunication means (18, 19) to transmit to the 15 
mobile telephone (16) of a payer (13) identified by 
the admissible telephone number, a first confirma- 
tion message that contains a request to transmit the 
safety parameter that is to be verified by the third 
verifying means (20c) against the safety criterion. 

A system according to claim 4, wherein the second 
acceptance message further generates an order to 
the telecommunication means (18, 19, 28, 47) to 
communicate with the telecommunication terminal 
(15, 15a, 27, 29, 46) identified by the admissible 
identification code detected by the first verifying 
means (20a), to transmit a second confirmation 
message that confirms the generation of the first ac- 
ceptance message. 30 

A system according to claim 1 , wherein the third ac- 
ceptance message generated by the third verifying 
means (20c) generates an order to the telecommu- 
nication means (18, 19, 28, 47) to communicate 35 
with the telecommunication terminal (15, 15a, 27, 
29, 46) identified by the admissible identification 
code detected by the first verifying means (20a) to 
transmit a third confirmation message that confirms 
the generation of the third acceptance message. 40 

A system according to claim 1 or 6, wherein the third 
acceptance message generated by the third verify- 
ing means (20c) generates an order to the telecom- 
munication means (1 8, 1 9) to communicate with the 45 
mobile telephone (16) identified by the admissible 
telephone number detected by the first verifying 
means (20a), and to transmit a fourth confirmation 
message that confirms the generation of the third 
acceptance message. so 

A system according to claim 1 , 6 or 7, wherein the 
third acceptance message generated by the third 
verifying means (20c) generates a command to the 
account management means (20e) to process the ss 
debit in the payer's (13) account and to process the 
corresponding credit in the payee's (27, 29, 14, 14a, 
40, 46) account. 



10. "A system according to claim 9, wherein the account 
management means (20e) comprise first transmis- 
sion means for transmitting said credit to an admin- 
istration and management server (23) that compris- 
es a payees' data bank (25) in which all credits 
made in favor of each payee (27, 29, 14, 14a, 46) 
are stored, the administration and management 
server (23) transferring the credits contained in the 
data bank (25) to financial entities that manage 
each payee's financial accounts. 



13. A system according to claim 1 , wherein the author- 
ization request comprises data regarding the value 
of the transaction, and wherein the pre-established 
authorization criterion verified by the second verify- 
ing means (20b) is selected among an available bal- 
ance, a maximum credit limit and combinations 
thereof, established for each account of each payer 
(13). 

1 4. A system according to claim 8, wherein the account 
management means (20e) comprise second trans- 
mission means for transmitting said debit to an ad- 
ministration and management server (23) that com- 
prises a payers' data bank (24) wherein all debits 
made against each payer (13) are stored, the ad- 
ministration and management server (23) transfer- 
ring the credits contained in the payers' data bank 
(24) to financial entities that manage each payer's 
financial accounts. 

15. A system according to claim 1 , wherein the safety 
criterion verified by the third verifying means (20c) 
is a secret identification code known by the payer 
(1 3) and stored in the first data storage means (22). 

16. A system according to claim 15, wherein the third 
verifying means (20c) directly verify whether the 
safety parameter contains the secret identification 
code. 



1 1 . A system according to claim 1 or 8, wherein the ac- 
count management means (20e) control second in- 
termediate accounts selected from prepayment ac- 
counts, debit accounts in real time and post-pay- 
ment accounts, of the payers (13). 

12. A system according to claim 11, wherein the pre- 
payment accounts controlled by the account man- 
agement means (20e) comprise an electronic purse 
previously created in the first data storage means 
(22) for each buyer (13). 
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17. A system according to claim 15, wherein the third 
verifying means (20c) verify whether the safety pa- 
rameter contains an encrypted result of a self -veri- 
fication (33) carried out locally in the mobile tele- 
phone (16) after direct entry (6) of the secret iden- 
tification code into the mobile telephone by the pay- 
er (13), by means of decryption means for decrypt- 
ing the encrypted result, on the basis of the secret 
identification code stored in the first data storage 
means (22). 

18. A system according to claim 4, wherein when the 
first message verified by the first verifying means 
(20a) is a message received from the telecommu- 
nication terminal (15, 15a, 27, 41 , 46), the second 
acceptance message generates an order to the tel- 
ecommunication means (18, 19) to establish com- 
munication with the mobile telephone (16) for re- 
questing the payer (1 3) identified by the admissible 
telephone number to transmit the safety parameter. 

19. A system according to claim 4, wherein, when the 
first message verified by the first verifying means 
(20a) is a message received from a payer's (13) mo- 
bile telephone (16), the second acceptance mes- 
sage generates an order to the telecommunication 
means (1 8, 1 9) to transmit a message to said mo- 
bile telephone (16) requesting the payer (13) iden- 
tified by the admissible telephone number to trans- 
mit the safety parameter. 

20. A system according to claim 4, 18 or 19, wherein 
the second acceptance message further generates 
an order to the telecommunication means (18, 19) 
to transmit at least the value of the transaction and 
an identification of the payee, which are transmitted 
together with the message req uesting the safety cri- 
terion. 

21 . A system according to claim 1 , wherein the first 
server (20) processes a first message that further- 
more contains an identification of an e-mail ad- 
dress, wherein the payee (27) is a supplier of soft- 
ware files, and wherein the confirmation message 
generating means (20g) furthermore generate a fur- 
ther confirmation message that contains a decryp- 
tion code of the software file, received from the pay- 
ee (27) in the first server (20), said further confirma- 
tion message being transmitted to the payer's (13) 
mobile telephone (16). 

22. A system according to claim 1 , wherein the first 
server (20) further comprises first detecting means 
(20i) for detecting a first instruction to make a pur- 
chase with advance payment and collection code 
generating means (20j), and wherein the confirma- 
tion message generating means (20g) also gener- 
ate a complementary confirmation message that 
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contains the collection code, said complementary 
confirmation message being transmitted to the pay- 
er's (13) mobile telephone (16) and to the payee's 
(14, 14a, 27, 29, 46) telecommunication terminal 
5 (15, 15a, 27, 29,46). 

23. A system according to claim 1 , wherein the first data 
storage means (22) further comprise, with respect 
to each payee (14a, 46), third information associat- 

10 ed with said second information and that comprises 
data regarding products or services corresponding 
to each authorized transaction, and wherein the first 
server (20) further comprises 

15 second detecting means (20k) for detecting a 

second instruction to manage a delivery in per- 
son corresponding to an authorized transaction 
and received from the telecommunication ter- 
minal (15a) being a payee's (14a) mobile tele- 
20 phone. 

delivery code generating means (201) for gen- 
erating a delivery code identifying at least a 
product or service to be delivered, and identifi- 
cation message generating means (20m) iden- 
25 tifying said product or service, and wherein the 

confirmation message generating means (20g) 
further generate an additional message that 
contains the delivery code, said additional mes- 
sage being transmitted to the payer's (13) mo- 
30 bile telephone (16) and to the payee's (14a) 

mobile telephone (15a) and the identifying 
message being transmitted at least to the pay- 
er's (1 3) mobile telephone (1 6) along with a re- 
quest to transmit the safety parameter, 
35 and delivery management processing means 

(20n) that, when the third verifying means (20c) 
have verified that the safety parameter satisfies 
the safety criterion associated to the payer's 
(13) mobile telephone, generate an entry in a 
40 delivery note data base (37). 

24. A system according to claim 1 , wherein the first data 
storage means (22) also comprise fourth informa- 
tion associated to said second information and that 

45 comprise reference codes that identify the products 
or services of at least one payee (14a, 46) as well 
as a price associated to each product or service. 

25. A system according to claim 24, wherein the fourth 
so information also comprises a first selectable tele- 
phone number comprised of one of said reference 
codes and an identification code of the correspond- 
ing payee (14, 46), and that constitutes the admis- 
sible identification code. 

55 

26. A system according to claim 24 or 25, wherein the 
fourth information also comprises the admissible 
identification code in the form of a telephone 
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number for access to the payee (1 6,46) associated 
to at least a first menu comprised of the reference 
codes, the products or services identified respec- 
tively by each one of said reference codes and the 
price of said products or services. 5 

27. A system according to claim 1 , wherein the admis- 
sible identification code is an admissible access tel- 
ephone number for accessing a second menu of re- 
spective admissible identification codes of a plural- 10 
ity of associated payees (1 4a, 46) and wherein the 
first data storage means (22) further comprise fifth 
information associated to said second information 
and that comprise reference codes that identify 
products or services of each one of the payees 15 
(1 4a, 46) as well as a price associated to each prod- 
uct or service. 

28. A system according to claim 27, wherein the fifth 
information further comprises a first selectable tel- 20 
ephone number comprised of one of said reference 
codes and an identification code of the correspond- 
ing payee (14, 46) and that constitutes the admis- 
sible identification code. 

25 

29. A system according to claim 27 or 28, wherein the 
fifth information further comprises the admissible 
identification code as an access telephone number 
of the payee (14,46) being associated to at least a 
first menu comprised of the reference codes, the 30 
products or services identified respectively by each 

of said reference codes and the price of each of said 
products or services. 

30. A system according to claim 1 , wherein the second 35 
information in the first data storage means (22) 
comprise 

identification codes of a plurality of vending ma- 
chines (29) each one of which includes a digital *o 
mobile telephone (29a) as a telecommunica- 
tion terminal, identified by a mobile telephone 
number as an admissible identification code; 
an authorization code associated to the admis- 
sible identification code of each vending ma- <5 
chine; 

an activation code for activating the vending 
machine (29), associated to each authorization 
code that activates the vending machine for re- 
ceiving a request from the payer (13) identified 50 
by the admissible telephone number; 
and wherein 

the confirmation message generating means 
(20g) generate, when the first, second and third 
verifying means (20a, 20b, 20c) have respec- 55 
tively generated the first, second and third ac- 
ceptance message, and transmit the confirma- 
tion message that comprises at least the code 
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for activating the vending machine and the ad- 
missible telephone number of the payer's (13) 
mobile telephone (16). 

31 . A system according to claim 30, wherein the confir- 
mation message generating means (20g) establish 
a communication between the payer's (13) mobile 
telephone and the vending machine (29), for a pre- 
established period of time during which the payer 
(1 3) can transmit, through the first server (20), a se- 
lection message to the vending machine (29); and 
wherein the server (20) further comprises deactiva- 
tion detecting means (20o) for detecting deactiva- 
tion of the vending machine (29). 

32. A system according to claim 31 , wherein the author- 
ization criterion associated to the admissible tele- 
phone number of each vending machine is a direct 
authorization code that establishes a maximum limit 
selected from an economic value and a number of 
dispensing requests, admitted in a specific period 
of time in respect of requests made from the same 
mobile telephone, and wherein the confirmation 
message generating means (20g) generate the 
confirmation message when the direct authoriza- 
tion code has been detected. 

33. A system according to claim 30, wherein when the 
confirmation message generating means (20g) in 
the first server (20), close the communication with 
the vending machine (29) after having transmitted 
the confirmation message, so that the payer (13) 
may make his selection directly by means of the se- 
lection display of the vending machine. 

34. A system according to claim 30,31 ,32 or 33, where- 
in the first server (20) further comprises recording 
means (20p) associated to the authorization means 
(20d), for recording transactions recorded in each 
vending machine (29). 

35. A system according to claim 1 , wherein the first ver- 
ifying means (20a) of the first server (20) further 
comprise complementary verifying means (20g) be- 
ing associated to the selecting means (20h), for ver- 
ifying if the admissible identification code that has 
been verified by the first verifying means (20a) in 
said first message received from a payer (13) iden- 
tified by a first admissible telephone number and 
containing a transaction request that has been ver- 
ified by the second verifying means (20b), corre- 
sponds to a second admissible telephone number 
from among the admissible telephone numbers of 
a digital mobile telephone (41 ) comprised within the 
first information contained in the first data storage 
means (22) and if the first message identifies the 
second admissible telephone number as identifica- 
tion of a payee (40), the complementary verifying 



EP1 136 961 A1 



15 



20 



25 



30 



35 



40 



21 



41 EP 1 136 

means (20q) generating a fourth acceptance mes- 
sage when detecting that said second admissible 
telephone number corresponds to a payee (40), 
said fourth acceptance message being processable 
by the confirmation message generating means 5 
(20g), and wherein the rejection message generat- 
ing means (20f) generate a rejection message when 
the fourth message has not been generated. 

36. A system according to claim 35, wherein 10 

the confirmation message generating means 
(20g) generate, when detecting the first, sec- 
ond, third and fourth acceptance message, a 
first confirmation message containing an iden- is 
tification of the payer (13), an identification of 
the transaction and a petition for conformity to 
the payee (40) identified in the first message; 
said petition for conformity comprising a re- 
quest of transmission of the safety parameter, 20 
and transmit said confirmation message to the 
mobile telephone (41) of the payee (40) identi- 
fied by the second admissible telephone 
number through the telecommunication means 
(1 8,1 9) selected by the selecting means; 25 
the third verifying means (20c) furthermore ver- 
ify if the safety parameter transmitted from the 
mobile telephone (41) in response to the peti- 
tion for conformity, satisfies the safety criterion 
associated to the second admissible telephone 30 
number, said third verifying means (20c) gen- 
erating a fifth acceptance message when said 
parameter satisfies said safety criterion; 
the authorization means (20e) authorize the ac- 
count management means (20d) when said 35 
fifth acceptance message has been generated; 
the confirmation message generating means 
(20g) generate and transmit a second confir- 
mation message to the mobile telephone (16) 
of the payer and to the mobile telephone (41) 40 
of the payee (41). 

37. A system according to any of claims 1 , 35 or 36, 
wherein, in the first server (20), each second infor- 
mation contained in the second data storage means 45 
(21) and referring to the type of digital mobile tele- 
phone corresponding to each admissible telephone 
number of each associated payer (1 3) and each ad- 
missible identification code of each payee (40) 
when the latter is a number of a digital mobile tele- so 
phone, is a first identifying code being representa- 
tive of the International Mobile Equipment Identifier 
(IMEI). 

38. A system according to claim 37, wherein the first 55 
server (20) comprises first inquiry means (20r) for 
inquiring in at least one Visitor Location Register 
(VLR) comprising a first register relating telephone 
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numbers with an IMEI code, the IMEI code corre- 
sponding to each of the admissible telephone num- 
bers, and updating means (20s) for updating said 
second information in the second data storage 
means (21) by comparing each IMEI code inquired 
by thefirst inquiry means (20r)with each code being 
representative of the IMEI code associated to each 
admissible telephone number as contained in the 
second data storage means (21). 

39. A system according to claim 38, wherein the first 
inquiry means (20r) extract the IMEI code associat- 
ed to each admissible phone number, from an 
Equipment Identifier Register (El R) that contains an 
association between each admissible telephone 
number and the IMEI code corresponding to each 
admissible telephone number, and which receive 
said association from each Visitor Location Register 
as updated by said Visitor Location Register. 

40. A system according to claim 38 or 39, wherein the 
first inquiry means (20r) extract the IMEI code as- 
sociated to each admissible telephone number, 
from an Unstructured Supplementary Service Data 
(USSD) frame into which each Visitor Location Reg- 
ister associated to each Mobile Switching Center 
(MSC) which has issued said frame, has inserted 
the IMEI code associated to the admissible tele- 
phone number corresponding to the user who has 
originated said frame. 

41. A system according to claim 38, wherein the first 
inquiry means (20r) extract the IMEI code associat- 
ed to each admissible telephone number, through 
an interface between the Visitor Location Register 
and said inquiry means (20r). 

42. A system according to claim 37, wherein the first 
server (20) comprises 

second inquiry means (20t) for inquiring the IM- 
EI code corresponding to each admissible tel- 
ephone number, in Call Data Registers (CDR) 
of a data bank of a mobile telephony network 
operator, that contain a relation of each tele- 
phone number which, on the grounds of a call, 
has originated a Call Data Register with an IMEI 
code of the terminal from which said call origi- 
nated, 

second updating means (20u) for updating said 
second information in the second data storage 
means (21 ) on he basis of a comparison of each 
IMEI code inquired by the second inquiry 
means (20t) with each code being representa- 
tive of the IMEI code associated to each admis- 
sible telephone number, contained in the sec- 
ond data storage means (21). 
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43. A system according to claim 37, wherein the second 
information further comprises at least one datum 
being indicative of a communication capacity se- 
lected from a capacity of managing sessions ac- 
cording to Wireless Application Protocols (WAP), a s 
capacity of managing sessions of Unstructured 
Supplementary Service Data (USSD), and combi- 
nations thereof, of each digital mobile telephone 
identified by an IMEI code and associated to an ad- 
missible telephone number. 10 

44. A system according to claim 37, wherein the first 
server (20) comprises 

third inquiry means (20v) for inquiring in a data 15 
bank of a mobile telephony network operator, 
registers that each Mobile Switching Center 
(MSC) transfers immediately each time a 
USSD frame or a voice call is addressed to a 
specific telephone number, said registers con- 20 
taining a relation of each telephone number 
from which a call was made or originated the 
USSD frame with an IMEI code of the terminal 
from which said call or frame originated, in re- 
spect of the IMEI codes corresponding to each 25 
admissible telephone number, and 
third updating means (20w) for updating said 
second information in said second datastorage 
means (21) on the basis of a comparison of 
each inquired IMEI code inquired by the third 30 
inquiry means (20v) with each code being rep- 
resentative of the IMEI code associated to each 
admissible telephone number contained in the 
second data storage means. 

35 

45. A process for processing payments and transac- 
tions between payers (13) and payees 
(27,29,14,1 4a, 13a,40;46), wherein a system as de- 
fined in any of the preceding claims is used. 

40 

46. A process according to claim 45, the process com- 
prising 

selectively receiving, through telecommunica- 
tion means (18,19,28,47), in a payment and 45 
transaction center (17), a first message com- 
prising the number of a mobile telephone (16) 
of a payer (13) or an identification code of a 
payee (27,29,14,14a,13a,40,46), and, further- 
more, so 
receiving the amount of a purchase or of a code 
identifying a product or service, in the payment 
ad transaction center (17), 
verifying if the first message originates from a 
payer (13) identified by an admissible tele- 55 
phone number or an admissible identification 
code of a payee (27,29,1 4,1 4a,13a,40,46); 
- verifying if conditions of a transaction request- 



ed in the first message, satisfy transaction cri- 
teria stored in first data storing means (22); 
verifying the type of digital mobile telephone as- 
sociated to the admissible telephone number, 
in second data storage means (21 ), and select- 
ing one telecommunications equipment (1 8,1 9) 
for communicating with the digital mobile tele- 
phone (16) identified by the admissible tele- 
phone number, through a telecommunications 
service being compatible with the type of digital 
mobile telephone (16) identified by the admis- 
sible telephone number; 
checking "on line", in the first data storage 
means (22), if the payer (13) has a disposable 
balance in a previously created electronic 
purse in said transaction and payment center 
(17); 

requesting the payer (13) identified in the first 
message, when the transaction condition is sat- 
isfied and there is a sufficient disposable bal- 
ance for authorizing the transaction, to intro- 
duce into the mobile telephone (16) identified 
in the first message, and to transmit, a safety 
parameter; 

verifying in the first data storage means (22), if 
the safety parameter introduced into and trans- 
mitted by, the mobile telephone (1 6) of the pay- 
er, satisfies a safety criterion univocally as- 
signed to said mobile telephone (16); 
authorizing and carrying out the transaction as 
requested when the safety parameter satisfies 
the safety criterion; and 
- sending a confirmation that the transaction has 
been carried out, to the mobile telephone (16) 
of the payer and to the payee (27,29,14,14a, 
13a,40,46). 
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